Static task
static1
Behavioral task
behavioral1
Sample
c9653588440ea3e16cb487733847fcf0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9653588440ea3e16cb487733847fcf0_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
c9653588440ea3e16cb487733847fcf0_NEIKI
-
Size
3.8MB
-
MD5
c9653588440ea3e16cb487733847fcf0
-
SHA1
1ac6e80f7d3f7f933320ccb817b35d4e982e84a2
-
SHA256
b583051d4ffc47ff0ab7a3580d9fd0ee3a09f017f51a081512465ecef36e5f05
-
SHA512
0ec59292dcffd7d513ae1a74486f458b3ec33526c96e1548026192ac9729ead487c45781485ed3cb03cbef4a5b58dac924a9c79d9e8cec6a0d1051a0b77fc393
-
SSDEEP
98304:oJwakG4fYrq1HJvpliCQHawbzBbGSlaUEI96kdQDanpqHrO3ndI3/lL/v7zVwwXi:oJwakG4fYrq1HJvpliCQHawbzBbGSlaQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9653588440ea3e16cb487733847fcf0_NEIKI
Files
-
c9653588440ea3e16cb487733847fcf0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ